MAL-2025-67690 Malicious code in deliberate-beige-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c95c0745b9998315e41f8ce760662d6d588fa027611f87d710989d25d970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68621 Malicious code in guilty-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82d6815420e7d8c3a0dcbf323fb4a7335b3f1e8ad24fe7b4e44876df129ed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67115 Malicious code in casual-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749c1c107c480f5e02a82359f8690e2022d1abb94b9da4aafae34cd41e77b3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71246 Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady-brown-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776a3cfeb48fbf18eb1159f9d79d1f9a688ded670927161158d18d7694b6ce2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-scarlet-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48cddcc5d57cb1ed4247d4d5510ade9f51b5d4a66ecb4402c22744991dbb481d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in literary-maroon-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b1315c2422c9d9ed0123b474ca1c81e5b9cbd806da2024049eb356f0e6c01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in armed-brown-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7aab827817b7301529dc65b2932d1698c9aecfbc964d4051f04929174a373c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-pink-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d659540f7080253831d43d732d9bd864ac2dedda2e2d12148cfeff1053b4f07f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal-tan-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b2facced6d66e1651bc6e2c5f96d212ae8c3175379c52b8fb2a8f4531c2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-tomato-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1280df31ebaf45f4a2ebc83b3ecadaba873cecd55cb99ce517b933ee41356092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-crimson-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ecf1921767e89ded31d99709191b8c6cede4da7611c0c0d65c4cbd102303fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in limited-amber-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a385bfd434b0996ea8c64b1acd3b8eab3e8e17ef9a0dae3e6ca0d163490c7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978841f80fc19dd53b344847c548bb20c5b0487ac1df105de83e173fe8941438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-peach-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cd9f9fd444c2f7b1236af3824a6c29d6aa458a08367e2188e94454f5aa55e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative-white-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87136ec27d61d3b0b5f640919aea35852b1a9fda1fd0fefb46d5079ced9ee07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...